Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
File: d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft (raw, json)
Hash identifier: F3cCu8QlaGFB886BQ1FNydgpcA8uRzjPrDKAv1CxGUM=
Subject key identifier: 64:3F:72:65:86:1B:C3:BB:B2:9A:87:D5:49:17:A5:55:BD:B6:17:00
Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
Certificate issuer: /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Certificate serial: 0199FBEBA040AED8A5ACFDEA7D784CD3ECFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
Manifest number: 1210
Signing time: Sun 19 Oct 2025 10:02:27 +0000
Manifest this update: Sun 19 Oct 2025 10:02:27 +0000
Manifest next update: Mon 20 Oct 2025 10:02:27 +0000
Files and hashes: 1: FVyOtMSkw-0Vg62ACMKcfYtFTZg.roa (hash: 19Vo/+e85FEDOozBk9ulyjhvlWCZUEMrSObfkurwei4=)
2: bGBL61Pb5C5jQn9lTt04zeAidWQ.roa (hash: tcI+1ZDPgb0dQJ/mWEWyrYgZXPfZZ/VnqvsqqlmCxEY=)
3: d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl (hash: CktX1pjBrjFYDLxvYubU6Xp3ycbVqCGeQWFBztFbGUo=)
4: kfH4Hfcw2DAA4uCH3S-0NOLLLIE.roa (hash: +ssFltk6eznRSfe1ZkEA/pnveLfuNyk/DPp5U5STMlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a0:40:ae:d8:a5:ac:fd:ea:7d:78:4c:d3:ec:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Validity
Not Before: Oct 19 10:02:27 2025 GMT
Not After : Oct 20 10:02:27 2025 GMT
Subject: CN=643f7265861bc3bbb29a87d54917a555bdb61700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:1b:92:8c:83:56:71:87:0a:b0:25:97:9f:
a9:b2:fc:c1:a9:c5:c6:11:83:8f:d4:fe:28:94:d7:
d1:9c:90:93:4e:95:bd:f0:7e:c3:67:2b:87:d4:f4:
d6:4c:96:13:b0:bf:50:20:e7:c8:66:86:4b:10:89:
8d:80:07:4d:80:db:d4:c4:2f:2f:b6:30:b1:c6:56:
6f:dd:23:1a:76:86:fb:a2:c4:56:2b:65:c6:84:06:
1b:90:89:a2:30:5c:f7:9e:b5:cc:5b:d4:be:0a:38:
23:d6:a9:d4:a9:64:7f:55:61:40:df:49:8c:d6:38:
bf:3c:17:56:74:fe:ea:d1:6b:24:f6:25:03:44:72:
68:8f:b1:d0:c4:aa:69:0d:bf:2c:32:57:85:3c:52:
86:f1:c6:17:cf:0c:6e:05:f0:29:06:17:b8:59:7c:
2a:ea:a3:0d:6a:3f:74:5f:91:e2:a8:df:84:85:4f:
01:dd:55:4a:c1:a5:72:4e:cd:20:0a:d5:18:47:4c:
67:a9:ab:dc:77:82:33:3d:e4:5d:e9:3d:a5:6a:a5:
08:6b:1b:94:ad:7a:3f:c1:61:e0:80:ee:90:ea:32:
b8:3c:44:17:fa:33:f8:a1:31:d3:87:af:76:d6:b3:
53:8a:0b:45:a1:1e:b6:3d:9b:ad:de:bb:fa:92:79:
14:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3F:72:65:86:1B:C3:BB:B2:9A:87:D5:49:17:A5:55:BD:B6:17:00
X509v3 Authority Key Identifier:
keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8b:db:fc:0f:e4:db:4b:4f:0e:f7:32:4d:ef:5f:42:1c:a2:
45:2b:ce:14:e3:0d:7b:e6:90:6a:b8:28:36:8c:e6:a8:06:c0:
d7:9a:27:37:01:ad:b7:0f:3e:82:09:67:f9:3f:74:1d:0e:62:
02:2c:13:e7:3e:28:cc:40:be:96:05:25:0b:3f:7a:5d:35:52:
7f:2a:91:dc:d5:c7:2f:d1:d9:d7:c9:f3:4d:79:5a:91:cd:c7:
88:69:ea:1d:6e:8f:c7:d5:70:87:bc:f6:a3:eb:22:cf:d7:7c:
93:db:7c:d0:d6:87:23:b8:db:cc:d0:60:46:73:82:1d:79:60:
b6:69:32:bf:c2:d6:08:2c:97:45:ac:86:cd:60:f1:d5:f4:19:
31:bd:ae:80:32:2c:1a:7d:03:d4:bd:39:61:b7:01:81:8b:80:
45:6d:63:63:0e:c1:bb:d4:e1:5b:88:48:25:b4:fe:e4:de:4c:
97:79:b7:93:8e:94:ff:59:4e:df:0f:f5:d9:0e:4a:83:ad:20:
a6:bf:0e:12:9a:f9:85:f8:e5:9c:e9:19:ca:9c:3c:ff:63:6b:
87:0e:ba:2e:5f:da:04:4d:f9:db:0d:84:8e:cc:ab:36:c1:0a:
3a:89:95:cf:5d:86:98:9e:10:e3:b1:a3:1b:f6:73:db:07:13:
fb:8e:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:01 2025 by rpki-client